pimcore 2.0.3 Helm chart

Name: pimcore Helm chart 2.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 29 Sept 2026

Pimcore data and experience management platform with PHP-FPM, Messenger workers, and maintenance automation

Version 2.0.3 todaydeploys tag v0.24.2 0Artifact Hub

pimcore 2.0.3 deploys 6 container images: dunglas/mercure, pimcore/pimcore, library/busybox, library/nginx and 2 more. Across the 5 measured, 287 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.6-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

2,6950035252

287 findings over 5 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
dunglas/mercure	v0.24.2	002577	1,154
pimcore/pimcore×2	php8.5.9-max-v5.2-hardened	—	not yet scanned
library/busybox	1.37.0	0000	0
library/nginx	1.30.4-alpine3.24	0005	51
library/mariadb	13.0.2	0010170	1,490
library/rabbitmq	4.3.6-alpine	0000	0

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

275 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-45447	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-8925	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-34182	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-19931	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-11856	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2026-73193	libdbi-perl@1.647-1ubuntu0.26.04.1	no fix listed
Medium	ALPINE-CVE-2026-10536	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-9079	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2026-53791	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Medium	ALPINE-CVE-2026-8924	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2026-60082	libdbi-perl@1.647-1ubuntu0.26.04.1	no fix listed
Medium	ALPINE-CVE-2026-34183	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-18924	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2026-70461	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Medium	ALPINE-CVE-2026-14457	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.81.1	1.82.2
Medium	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-3805	curl@8.17.0-r1	8.19.0-r0
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Medium	UBUNTU-CVE-2026-78030	libdbi-perl@1.647-1ubuntu0.26.04.1	no fix listed
Medium	UBUNTU-CVE-2026-14739	libdbi-perl@1.647-1ubuntu0.26.04.1	no fix listed
Medium	ALPINE-CVE-2026-80231	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-53790	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Medium	UBUNTU-CVE-2026-73194	libdbi-perl@1.647-1ubuntu0.26.04.1	no fix listed
Medium	UBUNTU-CVE-2026-15043	libdbi-perl@1.647-1ubuntu0.26.04.1	no fix listed
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Medium	UBUNTU-CVE-2026-14380	libdbi-perl@1.647-1ubuntu0.26.04.1	no fix listed
Low	ALPINE-CVE-2026-8926	curl@8.17.0-r1	8.22.0-r0
Low	UBUNTU-CVE-2026-70464	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-70455	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11564	curl@8.17.0-r1	8.22.0-r0
Low	UBUNTU-CVE-2026-70453	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-14456	openssl@3.5.6-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-53795	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-70456	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-70458	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-14740	libdbi-perl@1.647-1ubuntu0.26.04.1	no fix listed
Low	UBUNTU-CVE-2026-70460	rsync@3.4.1+ds1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-5773	curl@8.17.0-r1	8.20.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.3latest	today	v0.24.2	0035252	2,695
2.0.2	2 days ago	v0.24.2	0053252	3,106
2.0.1	3 days ago	v0.24.2	0053252	3,106
2.0.0	20 days ago	v0.24.2	0057284	3,437

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/pimcore.svg)](https://charts.stackradar.io/charts/helmforge/pimcore)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.